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As Fahmi and Golshani correctly point out, a protocol introduced in A. Cabello, Phys. Rev. Lett. 
85, 5635 (2000), to show that a quantum key distribution protocol can have efficiency one (i.e., can 
achieve the Holevo limit), does indeed not have efficiency one. The corrected protocol, introduced 
in A. Cabello, Recent. Res. Devel. Physics 2, 249 (2001), is reproduced here. 
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As Fahmi and Golshani correctly point out in the pre- 
ceding Comment |l| , a protocol introduced in [2j to show 
that a quantum key distribution protocol can have ef- 
ficiency one (i.e., can achieve the Holevo limit), where 
efficiency is defined as the number of secret bits per trans- 
mitted bit plus qubit, does indeed not have efficiency one. 
This error was already corrected in 0, 0] • For complete- 
ness' sake, the corrected protocol introduced in jj, 0], 
with efficiency one, is reproduced here. 

Suppose that the quantum channel is composed of two 
qubits (f and 2) prepared with equal probabilities in one 
of four orthogonal pure states: 
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Alice sends both qubits to Bob. Eve cannot access 
qubit 2 while she still holds qubit f . Each pair of qubits 
encodes 2 bits of the key (for instance, "00" if the state is 


\r)o), "01" if the state is \rji), "10" if the state is 1 772 ) , and 
"11" if the state is 1 773 ) ) - Since the four states (fTaj) - (|ld[) 
are orthogonal, Bob can unambiguously discriminate be- 
tween them and identify which is the one sent by Alice. 

As can be easily checked, the revised protocol does not 
only satisfy Mor's requirements to prevent cloning when 
Eve has a one-by-one access to the qubits (namely, that 
the reduced states of the first subsystem must be non- 
orthogonal and non-identical, and the reduced states of 
the second subsystem must be non-orthogonal H) for 
any two states chosen from ([Ia )) -((Td ]l . but is also secure 
against the double C-NOT eavesdropping strategy pro- 
posed by Fahmi and Golshani in [![. 
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